Ensure that BPF LSM is enabled ... Usage build: $ make run: $ make run $ touch /tmp/a.txt $ rm /tmp/a.txt $ make cat